Description
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1213-1 | New imagemagick packages fix several vulnerabilities |
EUVD |
EUVD-2006-0090 | Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program. |
Ubuntu USN |
USN-246-1 | imagemagick vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: debian
Published:
Updated: 2024-08-07T16:18:20.755Z
Reserved: 2006-01-04T00:00:00.000Z
Link: CVE-2006-0082
No data.
Status : Modified
Published: 2006-01-04T23:03:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2006-0082
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN